Currently, if personal information held by your organisation is accessed by or disclosed to an unauthorised party, it is merely voluntary for you to…